Systems, methods and devices for detecting unauthorized devices at transaction devices

ABSTRACT

Systems, methods and devices for detecting unauthorized devices at transaction devices are disclosed. A method for detecting an unauthorized device in a card slot of a transaction device may include inserting a card slot insert into a card slot for a transaction device, wherein the card slot insert has a width and thickness based on a manufactured width and thickness of the transaction device, and comprises a first indicator indicating that the card slot is secure and a second indicator indicating that the card slot is not secure. When the card slot insert is inserted to a manufactured depth of the card slot, the first indicator is visible outside the card slot, and the second indicator is not visible outside the card slot. When an object is in the card slot, the first indicator and at least a portion of the second indicator are visible outside the card slot.

BACKGROUND OF THE INVENTION 1. Field of the Invention

The present disclosure relates generally to point of sale devices, and,more particularly to systems, methods and devices for detectingunauthorized devices at transaction devices.

2. Description of the Related Art

Unscrupulous parties often install devices on point of sale devices thatcapture information from transaction cards (e.g., account information),or from user input (e.g., a personal identification number). Thesedevices (commonly referred to as “skimmers”) are often installed on orover a portion of the point of sale device, such as the card slot orkeypad, and are designed to look like they are part of the point of saleso they do not raise any suspicions of a customer. These devices,however, include electronics that capture magnetic stripe data, chipdata, and/or PIN data without the customer knowing that this ishappening.

For example, a skimmer may be installed within the card slot itself.Because card dimensions may vary, card slots on transaction devices mustaccommodate these differences. As a result, if a user's card is not ofthe maximum allowable dimensions, then the user may not notice that anunauthorized device has been inserted into the card slot.

SUMMARY OF THE INVENTION

Systems, methods and devices for detecting unauthorized devices aredisclosed. In one embodiment, a device for detecting an unauthorizeddevice in a card slot of a transaction device may include a card slotinsert having a width and thickness based on a manufactured width andthickness of the transaction device; a first indicator indicating thatthe card slot is secure; and a second indicator indicating that the cardslot is not secure. When the card slot insert is inserted to amanufactured depth of the card slot, the first indicator is visibleoutside the card slot, and the second indicator is not visible outsidethe card slot. When an object is in the card slot, the first indicatorand at least a portion of the second indicator are visible outside thecard slot.

In one embodiment, the first indicator is positioned based on themanufactured depth of the card slot.

According to another embodiment, a method for detecting an unauthorizeddevice in a card slot of a transaction device may include inserting acard slot insert into a card slot for a transaction device, wherein thecard slot insert has a width and thickness based on a manufactured widthand thickness of the transaction device, and comprises a first indicatorindicating that the card slot is secure and a second indicatorindicating that the card slot is not secure. When the card slot insertis inserted to a manufactured depth of the card slot, the firstindicator is visible outside the card slot, and the second indicator isnot visible outside the card slot, and when an object is in the cardslot, the first indicator and at least a portion of the second indicatorare visible outside the card slot.

In one embodiment, the first indicator and/or the second indicator ispositioned based on the manufactured depth of the card slot.

According to another embodiment, a device for detecting an unauthorizeddevice at a transaction device may include a card slot insert having awidth and thickness based on a manufactured width and thickness of thetransaction device and having a first indicator indicating that thetransaction device is secure, and a second indicator indicating that thetransaction device is not secure; a device measuring tool configured tointeract with a portion of the transaction device, the device measuringtool having a size and shape based on a known dimension of thetransaction device, and the card slot insert is configured to receivethe device measuring tool. When the card slot insert is inserted intothe card slot, the device measuring tool is received by the card slotinsert, and the device measuring tool is urged toward the portion of thetransaction device, the first indicator is visible when there is noobstruction between the device measuring tool and the transactiondevice, and when the card slot insert is into the card slot, the devicemeasuring tool is received by the card slot insert, and the devicemeasuring tool is urged toward the portion of the transaction device,the second indicator is visible when there is an obstruction between thedevice measuring tool and the transaction device.

In one embodiment, the card slot insert may be inserted to amanufactured depth of the card slot.

In one embodiment, the portion of the transaction device may be akeypad, a touchscreen, a magnetic stripe reader, etc.

In one embodiment, the device may further include a plurality of devicemeasuring tools, each device measuring tool having a size and shapebased on a known dimension of a different portion of the transactiondevice.

In one embodiment, the known dimension of the transaction device may bea manufactured dimension of the transaction device.

In one embodiment, the card slot insert may include a third indicatorindicating that the card slot is secure and a fourth indicatorindicating that the card slot is not secure.

In one embodiment, the device measuring tool may include an opening forviewing the first indicator or the second indicator.

According to another embodiment, a method for detecting an unauthorizeddevice in a card slot of a transaction device may include: (1) insertinga card slot insert into a card slot for a transaction device, whereinthe card slot insert has a width and thickness based on a manufacturedwidth and thickness of the transaction device and comprises a firstindicator indicating that the transaction device is secure and a secondindicator indicating that the transaction device is not secure; (2)interfacing a device measuring tool with the card slot insert, whereinthe device measuring tool is configured to interact with a portion ofthe transaction device and has a size and shape based on a knowndimension of the transaction device; and (3) urging the device measuringtool toward the portion of the transaction device. When the firstindicator is visible when there is no obstruction between the devicemeasuring tool and the transaction device, and when the second indicatoris visible when there is an obstruction between the device measuringtool and the transaction device.

In one embodiment, the card slot insert may be inserted to amanufactured depth of the card slot.

In one embodiment, the portion of the transaction device may be akeypad, a touchscreen, a magnetic stripe reader, etc.

In one embodiment, the device may further include a plurality of devicemeasuring tools, each device measuring tool having a size and shapebased on a known dimension of a different portion of the transactiondevice.

In one embodiment, the known dimension of the transaction device may bea manufactured dimension of the transaction device.

In one embodiment, the device measuring tool may include an opening forviewing the first indicator or the second indicator.

In one embodiment, the card slot insert may include a third indicatorindicating that the card slot is secure and a fourth indicatorindicating that the card slot is not secure. When the card slot insertis inserted to a manufactured depth of the card slot, the thirdindicator is visible outside the card slot, and the fourth indicator isnot visible outside the card slot, and when an object is in the cardslot, the third indicator and at least a portion of the fourth indicatorare visible outside the card slot.

In one embodiment, at least one of the third indicator and the fourthindicator is positioned based on the manufactured depth of the cardslot.

BRIEF DESCRIPTION OF THE DRAWINGS

For a more complete understanding of the present invention, the objectsand advantages thereof, reference is now made to the followingdescriptions taken in connection with the accompanying drawings inwhich:

FIGS. 1A and 1B depict an illustrative device for detecting unauthorizeddevices at according to one embodiment;

FIG. 2 illustrates a method for detecting unauthorized devices in a cardslot of a transaction device according to one embodiment;

FIG. 3 illustrates a card slot insert inserted into a card slot in anuncompromised transaction device;

FIG. 4 illustrates a card slot insert inserted into a card slot in acompromised transaction device;

FIG. 5 illustrates a system for detecting unauthorized devices at pointof sale devices according to another embodiment;

FIG. 6 illustrates a card slot insert and device measuring tool at anuncompromised transaction device; and

FIG. 7 illustrates a card slot insert and device measuring tool at acompromised transaction device.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

Several embodiments of the present invention and their advantages may beunderstood by referring to FIGS. 1-7.

Embodiments are directed to methods and devices for detecting thepresence of unauthorized devices at transaction devices, such as pointof sale devices. Although embodiments may be depicted in the context ofstand-alone point of sale devices, it should be recognized thatembodiments have applicability with any device having known dimensionsthat may receive information from a card (e.g., a transaction card) orfrom a user, including, for example, card readers and/or keypads at gasstation pump, vending machines, point of sale devices, ATMs, kiosks,locks, etc.

Embodiments disclosed herein may detect the presence of an unauthorizeddevice at a transaction device using at least one known reference pointon the transaction device to verify one or more dimension of thetransaction device. If a dimension of the transaction device beingmeasured differ from a known dimension of an uncompromised transactiondevice, an unauthorized device may be present at the transaction device.

In one embodiment, the known reference point may be based on thelocation of the card slot that receives a card (e.g., credit card, debitcard). For example, the card slot may have an industry standard height,width, and depth. Alternatively, the manufactured height, width, anddepth of the card slot may be used. Using the card slot as a reference,an actual dimension of the transaction device from the reference pointor area (e.g., card slot) may be compared to at least one knowndimension for a manufactured (e.g., uncompromised) transaction device todetermine whether an unauthorized device is suspected to be present. Byusing a fixed and repeatable point to attach the tool, such as insertionof a card slot insert and a card slot, the measurement of the at leastone known dimension can be repeated with relative confidence that thecorrect measurement is being made.

In one embodiment, the card slot may be a smart card slot, a dip readerslot, etc.

Dimensions that may be compared and verified may include the dimensionsof the card slot (e.g., height, width, and depth), distances from thereference point or area to a second point or area on the transactiondevice, shapes of the transaction device relative to the reference pointor area, etc. Of particular interest are the input devices (e.g.,keypads, card readers, etc.) that may be compromised through the use ofoverlays or other add-on devices that may capture the input data. Suchoverlays or other add-on devices are generally designed to replicate theappearance of the transaction device on which it is placed, but willalter the dimensions of the transaction device.

Although this disclosure is made in the context of using the card slotas a known reference point or area, it should be understood that otherpoints on the transaction device may be used as reference points orareas as is necessary and/or desired. Similarly, it should be recognizedthat other devices that interact with a transaction device may be used,such as device that may slide over the transaction device.

Referring to FIGS. 1A and 1B, an exemplary device for detecting thepresence of an unauthorized device at a transaction device is disclosedaccording to one embodiment. Device 100 may have one or two components.First, card slot insert 110 may be used to detect the presence ofunauthorized devices in a card slot of a transaction device. Forexample, insert portion 112 of card slot insert 110 may be inserted intothe card receiving slot, and indicator portion 114 may remain outsidethe card receiving slot.

In one embodiment, card slot insert 110 may be sized to accommodate themaximum width and maximum thickness of a card specified in the EMV cardstandard (i.e., 85.6×53.98×0.76 mm). Alternatively, the manufacturedwidth and thickness of the card slot may be used. In one embodiment, thelength of card slot insert 110 may vary as is necessary and/or desired.

Card slot insert 110 may include indicators (e.g., labels, markings,symbols, colors, etc.) to indicate to a user whether suspectedunauthorized devices are present in the card slot. For example, cardslot insert 110 may include an indicator based on the standard ormanufactured depth of the card slot. When card slot insert 110 is fullyinserted into the card slot (based on either the standard or themanufactured dimensions), a first indicator, such as “Secure” may bealigned with the outer edge of the card slot. If card slot insert 110cannot be fully inserted into the card slot, indicating some sort ofobstruction in the card slot, a second indicator, such as “Tamper” maybe visible outside of the card slot indicating that an unauthorizeddevice may be present, or that someone may have tampered with thetransaction device in some manner. If card slot insert 110 cannot beinserted into the card slot at all, that may indicate the presence of anunauthorized device in the card slot, or that someone may have tamperedwith the transaction device in some manner.

The size, positioning, location, type, etc. of the indicators may varybased on, for example, the model of the device.

It should be recognized that the indicators “Secure” and “Tamper” areexemplary only, and that any indicator that indicates whether thetransaction device is secure or tampered with may be used as isnecessary and/or desired. For example, colors, symbols, letters, logos,words, markings, raised markings/symbols (e.g., Braille markings, X,etc.), etc. may be used to convey the results of the evaluation.

In one embodiment, only one indicator (e.g., only “Secure” or only“Tamper” may be provided on card slot insert 110.

In another embodiment, device 100 may comprise card slot insert 110 anddimension measurement tool 120. A side view of dimension measuring tool120 is provided in FIG. 1B. In one embodiment, dimension measuring tool120 may interact with card slot insert 110 to detect the presence ofunauthorized devices outside of the card slot. With card slot insert 110inserted into the card slot, card slot insert 110 may be used as a knownreference for measuring known dimensions of the transaction device. Forexample, dimension measuring tool 120 may be received by card slotinsert 110, such as by sliding end 124 of dimension measuring tool 120over card slot insert 110. Card slot insert 110 may include indicators(e.g., markings, colors, or any other suitable indicator) based on theinteraction of card slot insert 110 and dimension measuring tool 120that may indicate whether the transaction device is secure or tampered.Dimension measuring tool 120 may include window or opening 128, whichmay allow the indicator on card slot insert 110 to be seen.Alternatively, dimension measuring tool 120, may be designed to beshorter than the full length of card slot insert 110 such that locationof one end of dimension measuring tool 120 may expose an indicator ofwhether the device may be secure or tampered. Other manners ofindicating whether the transaction device is secure may be used as isnecessary and/or desired.

In one embodiment, dimension measuring tool 120 may be pivotably and/orslidably connected on card slot insert 110.

Dimension measuring tool 120 may be sized to interact with card slotinsert 110 and the device based on dimensions of a manufacturedtransaction device, or a known, uncompromised transaction device. Forexample, end 122 of dimension measuring tool 120 may be sized such thatwhen dimension measuring tool 120 interacts with card slot insert 110,and also interacts with the transaction device (e.g., it is pressedtoward the device until it cannot go any further), a “secure” indicatormay be viewed through window or opening 128. The dimensions of dimensionmeasuring tool 120 may be selected to verify any suitable dimension,such as the height of the keypad, height of the touchscreen, position ofa magnetic stripe slot, etc.

In one embodiment, a plurality of dimension measuring tool 120 may beused. Each dimension measuring tool 120 may have a size and/or shape tointeract with a different part of the transaction device (e.g., one forthe keypad, one for the screen, one for the magnetic stripe reader,etc.).

When dimension measuring tool 120 interacts with card slot insert 110and is urged toward a transaction device having an unauthorized devicepositioned thereon, the presence of the unauthorized device may preventdimension measuring tool 120 from sliding to the same position it wouldin the known, uncompromised transaction device because of the additionalheight that the unauthorized device adds to the keypad. Thus, a “Tamper”or similar label may be is visible through window or opening 128,indicating that an unauthorized device, such as a keypad overlay, may bepresent.

For example, when card slot insert 110 is fully inserted into a cardslot of a transaction device, and dimension measuring tool 120 isproperly engaged with card slot insert 110, end 122 may be designed sothat the bottom surface of end 122 is able to slide over the top of keysof a keypad of the unadulterated transaction device with little to noclearance and without pushing the keys downward. If an overlay has beenplaced over or on top of the keypad, then end 122 will be unable toslide over the top of the keypad, as the added height of the overlaywill prevent end 122 from advancing. Preferably, a window will show alabel or other indicator that an unauthorized device may be present.

Device 100, including card slot insert 110 and dimension measuring tool120, may be passive, and may contain no electronics. In one embodiment,card slot insert 110 and/or dimension measuring tool 120 may be made ofplastic to eliminate or reduce the possibility of electrostaticdischarge.

Referring to FIG. 2, a method for detecting an unauthorized device in acard slot of a transaction device is provided according to oneembodiment. In step 210, a card slot insert may be inserted in to a cardslot of a transaction device. The card slot insert may have a height andwidth based on the manufactured dimensions of the transaction device, anindustry standard, etc. In one embodiment, card slot insert may haveindicators, such as “secure” and “tamper” positioned thereon based onthe depth of the card slot.

In step 220, once the card slot insert is inserted into the card slot,the indicators are observed. If, in step 230, the “tamper” or similarindicator is visible, or the card slot insert cannot be inserted intothe card slot, indicating that there is an obstruction in the card slot,in step 240, an unauthorized device may be suspected of being present.If, in step 230, the “tamper” or similar indicator is not visible and/orthe “secure” or similar indicator is visible, indicating that the cardslot insert can be fully inserted into the card slot with noobstructions, in step 245, it may be determined that the card slot issecure.

Exemplary illustrations of the card slot insert inserted into a cardslot in an uncompromised transaction device, and a card slot insertinserted into a card slot in a compromised transaction device, areprovided in FIGS. 3 and 4, respectively.

Referring to FIG. 5, a method for detecting unauthorized devices atpoint of sale devices is disclosed according to one embodiment. In step510, a card slot insert may be inserted in to a card slot of atransaction device. The card slot insert may have a height and widthbased on the manufactured dimensions of the transaction device, anindustry standard, etc. In one embodiment, the card slot insert may haveindicators, such as “secure” and “tamper,” positioned thereon based onthe use of a device measuring tool.

In step 520, a device measuring tool may be provided to, or interfacewith, the card slot insert. In one embodiment, the device measuring toolmay interact with the card slot insert by sliding over the end, restingthereon, pivoting thereon, etc. As discussed above, a plurality ofdevice measuring tools may be used, with each device measuring toolsized and/or shaped to interact with a different portion of thetransaction device.

In step 530, the device measuring tool may be urged toward the point onthe transaction device that is being verified, and the indicators on thedevice measuring tool may be observed. In one embodiment, the indicatorsmay be visible through a window, cutout, or similar in the devicemeasuring tool.

If, in step 540, the “tamper” or similar indicator is visible,indicating that there is an obstruction in the path of the devicemeasuring tool, in step 550, an unauthorized device may be suspected ofbeing present. If, in step 540, the “secure” or similar indicator isvisible, indicating that there is no obstruction, in step 555, it may bedetermined that the feature associated with the device measuring tool(e.g., the keypad, touchscreen, magnetic stripe reader, etc.) is secure.

Exemplary illustrations of a card slot insert and device measuring toolat an uncompromised transaction device, and a card slot insert anddevice measuring tool at a compromised transaction device, are providedin FIGS. 6 and 7, respectively.

It will be appreciated by persons skilled in the art that the presentinvention is not limited by what has been particularly shown anddescribed hereinabove. Rather the scope of the present inventionincludes both combinations and sub-combinations of features describedhereinabove and variations and modifications thereof which are not inthe prior art. It should further be recognized that these embodimentsare not exclusive to each other.

It will be readily understood by those persons skilled in the art thatthe embodiments disclosed here are susceptible to broad utility andapplication. Many embodiments and adaptations of the present inventionother than those herein described, as well as many variations,modifications and equivalent arrangements, will be apparent from orreasonably suggested by the present invention and foregoing descriptionthereof, without departing from the substance or scope of the invention.

Accordingly, while the present invention has been described here indetail in relation to its exemplary embodiments, it is to be understoodthat this disclosure is only illustrative and exemplary of the presentinvention and is made to provide an enabling disclosure of theinvention. Accordingly, the foregoing disclosure is not intended to beconstrued or to limit the present invention or otherwise to exclude anyother such embodiments, adaptations, variations, modifications orequivalent arrangements.

What is claimed is:
 1. A device for detecting an unauthorized device in a card slot of a transaction device, comprising: a card slot insert having a width and thickness based on a manufactured width and thickness of the transaction device; a first indicator indicating that the card slot is secure; and a second indicator indicating that the card slot is not secure; wherein: when the card slot insert is inserted to a manufactured depth of the card slot, the first indicator is visible outside the card slot, and the second indicator is not visible outside the card slot; and when an object is in the card slot, the first indicator and at least a portion of the second indicator are visible outside the card slot.
 2. The device of claim 1, wherein at least one of the first indicator and the second indicator is positioned based on the manufactured depth of the card slot.
 3. A device for detecting an unauthorized device at a transaction device, comprising: a card slot insert having a width and thickness based on a manufactured width and thickness of the transaction device comprising: a first indicator indicating that the transaction device is secure; and a second indicator indicating that the transaction device is not secure; a device measuring tool configured to interact with a portion of the transaction device, the device measuring tool having a size and shape based on a known dimension of the transaction device, and the card slot insert is configured to receive the device measuring tool; wherein: when the card slot insert is inserted into the card slot, the device measuring tool is received by the card slot insert, and the device measuring tool is urged toward the portion of the transaction device, the first indicator is visible when there is no obstruction between the device measuring tool and the transaction device; and when the card slot insert is inserted into the card slot, the device measuring tool is received by the card slot insert, and the device measuring tool is urged toward the portion of the transaction device, the second indicator is visible when there is an obstruction between the device measuring tool and the transaction device.
 4. The device of claim 3, wherein the portion of the transaction device is a keypad.
 5. The device of claim 3, wherein the portion of the transaction device is a touchscreen.
 6. The device of claim 3, wherein the portion of the transaction device is a magnetic stripe reader.
 7. The device of claim 3, further comprising a plurality of device measuring tools, each device measuring tool having a size and shape based on a known dimension of a different portion of the transaction device.
 8. The device of claim 3, wherein the known dimension of the transaction device comprises a manufactured dimension of the transaction device.
 9. The device of claim 3, wherein the device measuring tool comprises an opening for viewing the first indicator or the second indicator.
 10. The device of claim 3, wherein the card slot insert comprises a third indicator indicating that the card slot is secure and a fourth indicator indicating that the card slot is not secure; wherein: when the card slot insert is inserted to a manufactured depth of the card slot, the third indicator is visible outside the card slot, and the fourth indicator is not visible outside the card slot; and when an object is in the card slot, the third indicator and at least a portion of the fourth indicator are visible outside the card slot.
 11. The device of claim 3, wherein the card slot insert is inserted to a manufactured depth of the card slot.
 12. A method for detecting an unauthorized device in a card slot of a transaction device, comprising: inserting a card slot insert into a card slot for a transaction device, wherein the card slot insert has a width and thickness based on a manufactured width and thickness of the transaction device and comprises: a first indicator indicating that the transaction device is secure; and a second indicator indicating that the transaction device is not secure; interfacing a device measuring tool with the card slot insert, wherein the device measuring tool is configured to interact with a portion of the transaction device and has a size and shape based on a known dimension of the transaction device; and urging the device measuring tool toward the portion of the transaction device; wherein: the first indicator is visible when there is no obstruction between the device measuring tool and the transaction device; and the second indicator is visible when there is an obstruction between the device measuring tool and the transaction device.
 13. The method of claim 12, wherein the portion of the transaction device is a keypad.
 14. The method of claim 12, wherein the portion of the transaction device is a touchscreen.
 15. The method of claim 12, wherein the portion of the transaction device is a magnetic stripe reader.
 16. The method of claim 12, wherein the known dimension of the transaction device comprises a manufactured dimension of the transaction device.
 17. The method of claim 12, wherein the device measuring tool comprises an opening for viewing the first indicator or the second indicator.
 18. The method of claim 12, wherein the card slot insert comprises a third indicator indicating that the card slot is secure and a fourth indicator indicating that the card slot is not secure; wherein: when the card slot insert is inserted to a manufactured depth of the card slot, the third indicator is visible outside the card slot, and the fourth indicator is not visible outside the card slot; and when an object is in the card slot, the third indicator and at least a portion of the fourth indicator are visible outside the card slot.
 19. The method of claim 18, wherein at least one of the third indicator and the fourth indicator is positioned based on the manufactured depth of the card slot.
 20. The method of claim 12, wherein the card slot insert is inserted to a manufactured depth of the card slot. 